Shorewall users - Feb 2003 -

I cannot access my server/firewall from my LAN with my current setup.
please help this newby!
I would like just the basic settings to enable this. Current setup is
Mandrake default. Wi;; RTFM l8r... i promise

SW Version:1.3.7c
Kernel:2.4.19-16mdk #1 Fri Sep 20 18:15:05 CEST 2002 i686 unknown
unknown GNU/Linux
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth0: <BROADCAST,MULTICAST,PROMISC,UP> mtu 1500 qdisc pfifo_fast qlen
100
    link/ether 00:20:18:2f:af:7c brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.10/24 brd 10.0.0.255 scope global eth0
3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
    link/ether 00:d0:b7:49:73:5e brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.1/24 brd 192.168.1.255 scope global eth1
4: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP> mtu 1492 qdisc pfifo_fast qlen
3
    link/ppp
    inet 203.51.177.156 peer 172.31.38.24/32 scope global ppp0

IP ROUTE
172.31.38.24 dev ppp0  proto kernel  scope link  src 203.51.177.156
10.0.0.0/24 dev eth0  scope link 192.168.1.0/24 dev eth1  scope link
127.0.0.0/8 dev lo  scope link default via 172.31.38.24 dev ppp0

cheers();
> I cannot access my server/firewall from my LAN with my current setup.
> please help this newby!
> I would like just the basic settings to enable this. Current setup is
> Mandrake default. Wi;; RTFM l8r... i promise
As you are running Mandrake 9.0 and have ppp0 (I assume DSL), my
suggestion is to drop that preconfigured shorewall and get a fresh
install from shorewall.net.

Mandrake is a good distro, but the shorewall configuration for ppp0 is
*really* broken.

The easiest way for you to start:

- get the latest shorewall RPM from shorewall.net
- get the x-Interface .tar.gz
- get the QuickStart Guide appropriate for you

Have all on your local computer! Drop shorewall and install the latest
one:

% rpm -e shorewall
% rpm -Ivh shorewall.latest.rpm

Follow the instructions in the Guide. It is really easy, when doing that
way.

Good luck...

 karsten


-- 
Hi, I''m a signature virus. Copy me into your ~/.signature to help me
spread!

Hello ,

  

-- 
Best regards,
 Pham                          mailto:qdung@oci.com.vn